Analyzing Indicators Of Compromise
Analyzing Indicators Of Compromise is an agent skill (a SKILL.md file) from mukul975/Anthropic-Cybersecurity-Skills. Analyzes indicators of compromise (IOCs) including IP addresses, domains, file hashes, URLs, and email artifacts to determine maliciousness confidence, campaign attribution… It works with Claude Code, Codex, Cursor, Gemini CLI and GitHub Copilot and has 35,033 GitHub stars across a repository of 6 listed skills.
Data as of from the GitHub API; description from the skill's SKILL.md. Report an error
Add this skill
Claude
This repository is a Claude Code plugin marketplace. In Claude Code:
/plugin marketplace add mukul975/Anthropic-Cybersecurity-Skills
/plugin install cybersecurity-skills@anthropic-cybersecurity-skillsIn the Claude apps, zip the analyzing-indicators-of-compromise folder and upload it under Customize > Skills > + > Upload a skill (code execution must be on).
ChatGPT / Codex
Codex reads skills from .agents/skills/ in a repo or ~/.agents/skills/ for every project:
git clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
cp -r Anthropic-Cybersecurity-Skills/skills/analyzing-indicators-of-compromise .agents/skills/analyzing-indicators-of-compromise # repo; ~/.agents/skills for all projectsStandalone skills also load in the ChatGPT desktop app.
Cursor
Cursor loads skills from .cursor/skills/ (or ~/.cursor/skills/) and also reads .claude/skills/:
git clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
cp -r Anthropic-Cybersecurity-Skills/skills/analyzing-indicators-of-compromise .cursor/skills/analyzing-indicators-of-compromise # project; ~/.cursor/skills for all projectsSource (checked Oct 7, 2026): code.claude.com/docs/en/skills (opens in a new tab), code.claude.com/docs/en/plugin-marketplaces (opens in a new tab), support.claude.com/en/articles/12512180-using-skills-in-claude (opens in a new tab), learn.chatgpt.com/docs/build-skills (opens in a new tab), cursor.com/docs/context/skills (opens in a new tab)
What this skill does
Analyzes indicators of compromise (IOCs) including IP addresses, domains, file hashes, URLs, and email artifacts to determine maliciousness confidence, campaign attribution, and blocking priority. Use when triaging IOCs from phishing emails, security alerts, or external threat feeds; enriching raw IOCs with multi-source intelligence; or making block/monitor/whitelist decisions. Activates for requests involving VirusTotal, AbuseIPDB, MalwareBazaar, MISP, or IOC enrichment pipelines.
When it triggers
- Use when triaging IOCs from phishing emails, security alerts, or external threat feeds; enriching raw IOCs with multi-source intelligence; or making block/monitor/whitelist decisions.
- Activates for requests involving VirusTotal, AbuseIPDB, MalwareBazaar, MISP, or IOC enrichment pipelines.
More skills in mukul975/Anthropic-Cybersecurity-Skills
6 skills are listed from this repository.
Implementing Secret Scanning With Gitleaksmukul975/Anthropic-Cybersecurity-Skills
Similar skills
More security skills
Knowledge Ops
alirezarezvani/claude-skills
Use when a Head of Ops, Knowledge Manager, or TPM-Internal needs to author, validate, or clean up company SOPs and internal runbooks (procurement intake, vendor offboarding, incident-comms cascade…
Active · last commit Oct 23, 2026
SecurityPythonCode Review
phuryn/pm-skills
Review code for actionable defects. Correctness is the core; performance and security are optional sub-cases of the same engine.
Active · last commit Oct 16, 2026
SecurityOmp Roles
agentscope-ai/QwenPaw
Use this skill whenever you need the allowedtools / skills preset for a sub-agent role before calling spawnsubagent.
Active · last commit Oct 26, 2026
SecurityPythonLong Horizon Prompting
muratcankoylan/Agent-Skills-for-Context-Engineering
This skill should be used when writing, enhancing, or evaluating the launch prompt for a long-running autonomous agent or a parallel multi-agent orchestration attacking a hard problem: pseudo-formal…
Active · last commit Oct 12, 2026
SecurityPythonAgent Owasp Compliance
github/awesome-copilot
Check any AI agent codebase against the OWASP Agentic Security Initiative (ASI) Top 10 risks.
Maintained · last commit Oct 26, 2026
OfficialSecurityJavaScriptExperiment Audit
wanshuiyin/Auto-claude-code-research-in-sleep
Audit experiment integrity before claiming results.
Active · last commit Oct 24, 2026
SecurityPython
How do I install the Analyzing Indicators Of Compromise skill?
In Claude Code, run /plugin marketplace add mukul975/Anthropic-Cybersecurity-Skills and then /plugin install cybersecurity-skills@anthropic-cybersecurity-skills. For Codex or Cursor, copy the analyzing-indicators-of-compromise folder into .agents/skills/ or .cursor/skills/.
Is the Analyzing Indicators Of Compromise skill free?
Yes. The repository is open source under the Apache-2.0 license. The skill mentions an API key or token for an external service, which may need its own account.
Is Analyzing Indicators Of Compromise maintained?
The repository's most recent commit was on Aug 31, 2026. Its latest release is v1.3.0. appsgit only lists skills from repositories with a commit in the last six months.